Skip to content
OpenAdvisories

Vendor

Lumsoft

2 known vulnerabilities.

Products

ERP 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2025-1646

    Lumsoft ERP ASPX File UploadAjaxAPI.ashx unrestricted upload

    A vulnerability, which was classified as critical, has been found in Lumsoft ERP 8. Affected by this issue is some unknown functionality of the file /Api/TinyMce/UploadAjaxAPI.ashx of the component ASPX File Handler. The manipulation of the argument file lead…

    Lumsoft ERP
  • High 7.3
    CVE-2025-1165

    Lumsoft ERP FileUploadApi.ashx DoWebUpload unrestricted upload

    A vulnerability, which was classified as critical, was found in Lumsoft ERP 8. Affected is the function DoUpload/DoWebUpload of the file /Api/FileUploadApi.ashx. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the …

    Lumsoft ERP